CVE-2022-46957

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

Sourcecodester.com Online Graduate Tracer System V 1.0.0 is vulnerable to Cross Site Scripting (XSS).

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Jan 26, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-469594.3An issue in the component /admin/backups/work-dir of Sonic v1.0.4 allows attackers to execute a directory traversal.CVE-2022-46967.8There exists a use-after-free vulnerability in the Linux kernel through io_uring and the IORING_OP_SPLICE operation. If IORING_OP_SPLICE is CVE-2022-469658.8PrestaShop module, totadministrativemandate before v1.7.1 was discovered to contain a SQL injection vulnerability.CVE-2022-469669.8Revenue Collection System v1.0 was discovered to contain a SQL injection vulnerability at step1.php.CVE-2022-469679.8An access control issue in Revenue Collection System v1.0 allows unauthenticated attackers to view the contents of /admin/DBbackup/ directorCVE-2022-469685.4A stored cross-site scripting (XSS) vulnerability in /index.php?page=help of Revenue Collection System v1.0 allows attackers to execute arbiCVE-2022-46974.8The ProfilePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wp_user_cover_default_image_url’ parameter in veCVE-2022-469739.8Report v0.9.8.6 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability.CVE-2022-46984.8The ProfilePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several form fields in versions up to, and including,CVE-2022-46995.4The MediaElement.js WordPress plugin through 4.2.8 does not validate and escape some of its shortcode attributes before outputting them backCVE-2022-469969.8vSphere_selfuse commit 2a9fe074a64f6a0dd8ac02f21e2f10d66cac5749 was discovered to contain a code execution backdoor via the request package.CVE-2022-469979.8Passhunt commit 54eb987d30ead2b8ebbf1f0b880aa14249323867 was discovered to contain a code execution backdoor via the request package. This v
CVE-2022-46957: Medium severity, CVSS 6.1 | Vulnix